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® A system and method for controlling operation of 
a plurality of elements in an automated process, 
such as a production process, and indicating error 
conditions as they occur. Each unique set of input 
and output conditions of the various system ele- 
ments defines a unique logic state or zone. Thus, 
there are defined a multiplicity of valid system logic 
states or zones, each having a unique input/output 
image. A predetermined sequence of zones, produc- 
tive zones representing designed machine oper- 
ations, is stored in a zone table. All zones not 
explicitly defined in the zone table are automatically 
treated as error zones. A zone engine automatically 
cycles to observe any change in input/output image. 
Any change in inputs from the various system ele- 
ments automatically transfer action to the unique 
zone associated with such inputs, resulting in cor- 
responding changes in control outputs to the system 
elements and/or display an error message as appro- 
priate. 
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The present invention relates to a control sys- 
tem and method utilizing logic devices to control 
apparatus and to diagnose errors in the operation 
of the apparatus. 

Background of the Inventio n 

Machine control systems generally include an 
automatic mode of operation whereby the machine 
Is automatically cycled through a work sequence. 
Relay ladder logic (US- A-4063311) commonly has 
been used to define the machine sequences, 
whether the logic is effected by relays or program- 
mable controllers. The typical relay ladder logic 
diagram is a massive listing of relay, switch and 
solenoid conditions without an indication of logic 
flow which, while easy to read, is difficult to trans- 
late into the logic conditions intended to be repre- 
sented. In addition, a large number of implied con- 
ditions exist that are not depicted. For example, a 
relay ladder with twenty elements (switches, relays, 
solenoids, etc.) embraces well over one million 
possible combinations of conditions. As a practical 
matter only a small fraction of these conditions, 
those necessary to make the system work, are 
considered by the machine designer and encoded 
into the logic scheme. Potential problems abound. 
Some planned conditions may be omitted, and 
unplanned conditions may be present with serious 
consequences. 

The programmable controller (PC) was intro- 
duced with the hope that the massive racks of 
relays wired together In a permanent logic network 
could be replaced by a more reliable, smaller and 
readily reprogrammable electronic package. Al- 
though the PC was designed to replace relay con- 
trols, its design explicitly set out to replicate, in the 
design media, the relay ladder logic used by tech- 
nicians. Reprogrammability has proven to be a 
mixed blessing. Initial reprogramming is always 
needed as the system is set up and to meet 
product design changes. Any change made to the 
program logic requires a corresponding modifica- 
tion to associated diagnostic programming so the 
latter can properly reflect errors in the altered logic. 
The ease of making changes can allow modifica- 
tions to be made by any semi-qualified person. 
Unfortunately, there is often no automatic record of 
changes made, and there is therefore the possibil- 
ity that the documentation may not reflect the ac- 
tual program. This is a sufficiently serious problem 
for many production facilities that they are invest- 
ing heavily in add-on equipment to monitor pro- 
gram changes. Furthermore, the increase In num- 
ber of Input/Output (I/O) points desired by users 
and consequent greater complexity of controls 
have driven PC manufacturers to push the PC 
design to larger and larger units. These very large 



units are well designed to meet the needs of cen- 
tral chemical plant control rooms, for example, but 
are too slow for the fast-cycle automation, such as 
transfer lines. 

5 A significant cost of automated production lies 

in system "down-time" - i.e. time in which the 
automated system is non-productive - which may 
range between 50% and 60% during productive 
shifts. Analyses show that there are many causes 
10 of down time including: many potential sources of 
unintended stoppage, variable delays in bringing 
the appropriate skills to bear on the problem, repair 
times that vary from minutes to hours, and a sig- 
nificant time needed to return the machine to a 
75 "ready for automatic cycle" condition after all re- 
pairs have been made. Downtime is a direct con- 
sequence of the high degree of complexity re- 
quired to perform a large number of machining and 
part handling operations with the minimum of oper- 
20 ator intervention. While lower equipment failure 
rates are a high priority objective, it is widely 
believed that reducing time to return to production 
Is the major area of opportunity for improvement. 
The present invention Is directed to a system 
25 and method for controlling operation of a plurality 
of elements In an automated process, such as a 
production process and indicating error conditions 
as they occur. In accordance with the invention, 
each unique set of input and output conditions of 
30 the various system elements defines a unique logic 
state or zone. Thus, there are defined a multiplicity 
of valid system logic states or zones, each having 
a unique input/output image. A predetermined se- 
quence ofzones, productive zones representing de- 
35 signed machine operations, is stored In a zone 
table. All zones not explicitly defined In the zone 
table are automatically treated as error zones. A 
zone engine automatically cycles to observe any 
change in input/output image. Any change in inputs 
40 from the various system elements automatically 
transfers action to the unique zone associated with 
such inputs, resulting in corresponding changes in 
control outputs to the system elements and/or dis- 
play of an error message as appropriate. 
45 A preferred embodiment of the present inven- 

tion includes a control system with a logic device 
such as a microprocessing unit for scanning inputs 
from system sensing elements, such as limit 
switches or digitally coded signals, and generating 
50 outputs to system elements such as electric motors 
or indicator lamps. Control action is taken accord- 
ing to the input conditions that define a logic zone. 
Predetermined sequences of logic zones repre- 
senting machine operating steps are created and 
65 stored in a zone table in the microprocessing unit. 
Any zone that is not defined explicitly in the table 
is automatically defined as a fault, and operation is 
logically vectored to a specific error zone In the 
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zone table. Each new set of input and output con- 
ditions is compared with the zone table in the 
microprocessing unit, and if a mismatch is de- 
tected, or if a time in a specific zone is outside the 
predetermined time limits for that zone, predeter- 
mined action is effected (usually stop the ma- 
chine). 

In accordance with another feature of the in- 
vention for automatic generation of error messages, 
each logic zone and each input/output image has 
associated therewith a verbal description according 
to its function. Motion or action zones have asso- 
ciated verbs phases, such as "drill slide moving 
forward" and input and output (I/O) elements are 
named with nouns such as "forward limit switch", 
etc. The system continually examines the actions 
taking place or the lack of action, and the con- 
ditions of the system elements. When a fault oc- 
curs, i.e. when the combination of action and ele- 
ment conditions does not represent a productive 
situation, the names of the zones and inputs and 
outputs are combined to automatically compose a 
unique readily understood error message complete 
with verbs, nouns and objects in accordance with 
standard language construction. If the system is 
changed by the designer, the diagnostics and error 
message composition automatically follow with no 
additional programming. The system will automati- 
cally compose its own unique error message in 
accordance with the changes. 

Brief Description of the Drawings 

Figure 1 is a schematic view showing a drilling 
machine operated with the control system of the 
present invention. 

Figure 2 is a schematic diagram which depicts 
possible zones in operation of the machine slide 
of FIG. 1 and illustrates operation of the inven- 
tion. 

Figure 3 is a diagram depicting exemplary de- 
vices which produce Inputs to the system con- 
trol logic. 

Rgure 4 is a diagram depicting outputs from the 
control logic to actuate various machine mecha- 
nisms. 

Rgure 5 is a pictorial view showing the se- 
quence of zones in FIG. 2 with the positions of 
the limit switches and the conditions of the 
motion power indicated. Each zone image is 
read as a vertical slice in the view. 
Rgure 6 is a diagrammatic view of Zone 1 in 
FIGS. 2 and 5 showing upcoming zone possibili- 
ties when the machine completes its function in 
the current zone. 

Rgure 7 is a diagrammatic view showing sixteen 
possible zone images with four system elements 
(two switches and two motor conditions). The 
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zone images are read as vertical slices In the 
view. 

Figure 8 is a fragmentary block diagram of the 
station computer. 

5 Figure 9 is a schematic diagram and flow chart 

demonstrating the operation of the system. 
Figure 10 is a schematic diagram of an or- 
chestrater computer and a station computer 
connected in a communication loop with the 

10 orchestrater computer presenting error mes- 
sages on a computer terminal CRT. 
Figures 11-16 are pictorial illustrations of zone 
logic tables for a more complex machine sys- 
tem. 

76 Figure 17 shows the algorithm used to produce 
diagnostic messages in the system of the 
present invention. Brackets indicate variables 
and a block indicates a fixed word. 
Figure 18 shows a portion of a CRT screen 

20 presenting an error message generated by the 
system of the present invention. 
Figure 19 shows a portion of an Input/Output 
table present in the command interpreter of the 
system. 

25 

Detailed Description 

The term "mechanism" as used herein is de- 
fined to mean a device that produces motion, such 
30 as a slide drive motor, a spindle motor or a clamp 
solenoid valve and cylinder as shown in Figure 4. 
"Inputs" sense mechanism conditions and send 
electrical signals to a logic control device. Exam- 
ples are limit switches, digital coded signals and 
35 sensing devices such as shown In Figure 3. 
"Outputs" are generated by a control logic device 
and actuate mechanisms as illustrated in Figure 4. 
The control logic device drives outputs In accor- 
dance with the conditions specified in the zone 
40 tables as described hereinafter. The following ex- 
planation involves a simple drilling machine that 
automatically moves a rotating drill against a work- 
piece to drill a hole, withdraws the drill, and returns 
back to the starting position. The cycle is automati- 
cs cally repeated. It will be appreciated that this rela- 
tively simple application of the invention is by way 
of example only. 

Referring to Figure 1, the drilling machine 10 
includes a base 12 with a reversible electric motor 
50 16 mounted thereon. Motor 16 has an output shaft 
18 coupled through a geared transmission 22 to 
drive a worm shaft 24. A machine slide 26 is 
slidably mounted on base 12 in engagement with 
worm shaft 24. A drill head 28 rotates a drill bit 30 
55 for drilling a hole in a workpiece (not shown). Limit 
switches 32 and 34 are positioned on machine 
base 12, and fingers 36 and 38 on slide 26 engage 
limit switches 32, 34 at the extreme limits of travel 
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of the machine slide. Limit switches 32, 34 are 
connected to a station computer 40. Motor 16 is 
powered by a motor controller 54 which provides a 
feedback signal indicative of motor operation. Con- 
troller 54 is coupled to station computer 40. Com- 
puter 40 is also connected to a communication 
loop 41 that contains an orchestrater computer 72. 

The general operation of machine 10 requires 
slide 26 to move off returned limit switch 32 by 
energizing motor 16 to rotate lead screw 24 and 
move slide 26 forward until finger 38 engages 
advanced limit switch 34. At this point motor 16 
must be stopped and energized to rotate lead 
screw 24 in the opposite direction for reversing the 
direction of travel of machine slide 26 until finger 
36 engages limit switch 32. Again motor 16 is 
energized to move the slide in the advance direc- 
tion, and so on in continuous cycling. The current 
in the motor starter coil from line 48 is sensed in 
conventional fashion and is fed back to micropro- 
cessor 40 to reflect the condition of the motor 16. 
The condition of the motor starter coil is continually 
sensed so that the output is confirmed while the 
current is present. 

A control panel 45 is connected to station 
computer 40 and includes push buttons 47 that 
indicate functions such as "start drill motor", 
"advance slide", "single step", "stop drill motor", 
"return slide", "automatic" and "manual". Push 
button logic 51 couples control panel 45 to station 
computer 40. A relay 52 is connected to station 
computer 40 to shut down machine 1 0 if an error is 
detected. 

Referring to Figure 2, the "zones" of operation 
of drilling machine 10 are represented . In Zone 
No. 1, machine slide 26 is ADVANCING OFF re- 
turned limit switch 32. Zone No. 2 represents the 
drilling machine slide 26 ADVANCING BETWEEN 
the limit switches. Zone No. 3 represents drilling 
machine slide 26 ADVANCED FROM returned limit 
switch 32 and engaging advanced limit switch 34. 
Zone No. 4 represents machine slide 26 in AD- 
VANCED position and with slide motor 16 stopped. 
Zone No. 5 represents machine slide 26 RETURN- 
ING OFF advanced limit switch 34. Zone No. 6 
represents machine slide 26 RETURNING BE- 
TWEEN the limit switches. Zone No. 7 represents 
machine slide 26 RETURNING FROM advanced 
limit switch 34 and engaging the returned limit 
switch 32. Zone 8 represents machine slide 26 
RETURNED and motor 16 stopped. Zone No. 0 
represents machine slide 26 stopped between lim- 
its. As will become apparent from the following 
discussion, zone description In upper case letters 
in the preceeding discussion is important in com- 
posing error messages. 

Figure 5 is a pictorial view showing the zone 
patterns. The eight possible inputs and eight possi- 



ble outputs are illustrated. . The black or filled 
blocks represent power (output) or switch (input) 
"on" and a blank block represent power or switch 
"off". For example, In Zone 1, input to the station 

5 computer 40 is limit switch 32 "on" and limit switch 
34 "off". The output from the station computer 
causes motor controller 54 and motor 16 to move 
the machine slide in either the advance or return 
direction. Again, in Zone 1, motor 16 is "on" in the 

10 advance direction and "off" in the return direction. 
Vertical slices through the diagram in Figure 5 
represent "images" of each of the nine productive 
zones. 

Figure 6 is a pictorial view showing the mecha- 

75 nism operating In Zone 1. Any change In Input or 
output causes a zone change. Figure 6 demon- 
strates that the only productive operating zone to 
follow Zone 1 is Zone 2. Any other zone is un- 
defined in the zone table of FIG. 7, and therefore is 

20 interrupted as an error zone. All the possible com- 
binations of conditions do not have to be antici- 
pated because the system operating zones have 
been constrained during programming to those 
planned. For purposes of explanation, those zones 

25 relative to the planned operation steps of the ma- 
chine during error free operation, have been de- 
fined as "productive zones". Only the productive 
zones need to be considered. For example, if the 
inputs show both limit switches 32 and 34 "on", 

30 this Is automatically an error zone because such 
conditions are not present in the programmed 
zones (FIG. 5). The various combinations can be 
quickly entered into a zone logic table by defining 
all productive zones plus at least one error zone. 

35 The error zone may Issue a shut down signal to the 
system. With two limit switches and two motor 
directions, there are only sixteen possible physical 
combinations, as shown In Figure 7. The number of 
possible combinations is two (on/off) mathemat- 

40 ically taken to the power of the number of on-off 
devices present. 

Figure 8 is a block diagram of station computer 
40. A block of RAM 58 Includes I/O memory, timer 
memory 64, zone data table memory 66, and 

45 "flight recorder" and journal memories 68, 70. Sta- 
tion computer 40 includes an MRU 42 which com- 
municates with memory 58 via the address bus 59 
and the data bus 60. The program for executing 
station operation is stored in command interpreter 

50 EPROM 61. An oscillator 62 supplies the clock 
function. MRU 42 executes the program in EPROM 
61 and carries out the system functions shown in 
Figure 5. 

Upon entry into a new zone, zone engine MRU 
55 42 takes the following action: write the new zone 
number and related information to flight recorder 
memory 68, set an internal zone timer to zero, and 
set the physical outputs as indicated by the zone 
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table. For example, upon entry into Zone 1 (FIG. 
5). MPU 42 energizes in the advance direction. 
Zone engine MPU then continues to monitor the 
I/O image from and to limit switches 32, 34, moni- 
tor controller 54 and motor 60, and to compare this 
information to the zone image in Zone 1. In the 
event of a change of I/O indicia, MPU 42 automati- 
cally steps to the appropriate zone reflecting the 
new I/O image - i.e. Zone 2 in the event of proper 
operation (FIG. 6). or an error zone if the latter is 
appropriate. In the event of proper operation, the 
entire cycle repeats continuously. 

Timer memory 64 checks the time in zone 
against minimum or maximum times for that zone 
stored in zone data table 66. Flight recorder mem- 
ory 68 records the history of zones over a number 
of zone changes, such as one thousand zone 
changes for example, and continually over-writes 
this data to reflect the last one thousand zone 
changes. This data is useful in analysis of an error, 
e.g. to determine that the machine has been slowly 
deteriorating. Journal memory 70 records error in- 
formation continually from start-up of the system. A 
user can examine error history in previous months 
or years. A copy of the journal or flight recorder 
can be sent to the screen of terminal 69. or a hard 
copy can be produced at printer 71 in accordance 
with the program in EPROM 61 . 

Figure 9 demonstrates operation of the system 
for drill station 10, including the zone timer as logic 
"inputs", for Zones 1-4 and 99. The outputs SLIDE 
MOTOR ADVANCE and SLIDE MOTOR RETURN, 
and the inputs SLIDE RETURNED LIMIT SWITCH 
and SLIDE ADVANCED LIMIT SWITCH are listed 
along the top. along with MINIMUM TIME IN ZONE 
and MAXIMUM TIME IN ZONE. The zone functions 
are listed along the left side, with the zone num- 
bers beside the function names. One zone function 
is identified as ERROR Zone 99. The zone image 
for each of the operating zones is presented in a 
horizontal slice of the chart next to the zone name 
and number. The hatched lines indicate which in- 
puts and which outputs are turned "on" (hatched) 
and "off" (unhatched) in each zone. For example, 
in Zone 1. the SLIDE MOTOR ADVANCE output 
and the RETURNED LIMIT SWITCH input are 
"on". Output SLIDE MOTOR RETURN and input 
SLIDE ADVANCED LIMIT SWITCH are "off". For 
demonstration purposes, the table of FIG. 9 also 
shows ail operations having two seconds minimum 
time and four seconds maximum time in zone. 

Figure 9 also illustrates zone transfer in the 
event of a change in input or output state. For 
example, in Zone 1, it is expected that SLIDE 
RETURNED LIMIT SWITCH input will change from 
"on" to "off", whereby zone logic will transfer to 
Zone 2. Any other I/O change is an error, and logic 
transfers to error Zone 99. Likewise, in Zone 2, it is 
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expected that the next I/O change will be activation 
of SLIDE ADVANCED LIMIT SWITCH, whereby 
logic transfers to Zone 3. Note that only one I/O 
signal changes between Zones. MINIMUM TIME 

5 and MAXIMUM TIME blocks are checking the 
times in zone. The numbers "2" and "4" represent 
the acceptable times. The blocks also show the 
number "99" to indicate that, if less than minimum 
or more than maximum time in the zone is exper- 

10 ienced, the system transfers to Zone 99 and shuts 
down the machine. 

A flow diagram is interposed between Zone 1 
and Zone 2 to show the flow of events (the flow 
between other zones being similar). The number 

75 "2" in a circle (circle meaning from "on" to "off") 
in the SLIDE RETURNED LIMIT SWITCH block of 
Zone 1 indicates that, when this input changes due 
to the SLIDE RETURNED LIMIT SWITCH turning 
off. the logic attempts to transfer the machine into 

20 Zone 2. First, the time in zone is compared with 
the minimum time in zone to make certain that the 
machine has been in Zone 1 for at least the mini- 
mum required time. Then, the time in zone is 
compared with the maximum permitted time in 

25 zone to make certain that the maximum time has 
not been exceeded. These two zone timer values 
effectively form a window in which the function of a 
zone must take place. 

Next the zone engine writes the Zone 1 image 

30 into the flight recorder along with the I/O image that 
caused the exit from Zone 1. Taking SLIDE MO- 
TOR ADVANCE as the leftmost bit of the six bits 
(inputs and outputs listed at the top of the chart) in 
the zone and MAXIMUM TIME as the rightmost bit, 

35 the zone image is written into the flight recorder as 
"101000" with "1" representing "on" and "0" re- 
presenting "off". The flight recorder now has a 
record that the machine has been in Zone 1, and 
the conditions that existed in Zone 1. Next, the 

40 machine slide will move off the returned limit 
switch and this bit will change form "on" to "off" 
establishing Zone 2 conditions. At this point, if a 
change in output was required, It would occur. It so 
happens that transfer from Zone 1 to Zone 2 does 

45 not require a change in output-only the inputs 
changed requiring a new zone to be defined. The 
push button lights for Zone 2 are turned on and 
latched. Next, the zone engine continually checks 
Zone 2 conditions until there is a change in input, 

50 or a change in output if something in the output 
system has failed. When a change occurs, the 
process is repeated, and the process proceeds as 
planned on through the cycle of the zones and 
starts again with Zone 1 . 

5S Looking at Zone 2, it will be apparent that the 

SLIDE MOTOR ADVANCE output block shows 
"on" and all other blocks show "off", and that 
SLIDE ADVANCED LIMIT SWITCH must change 
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from "off" to "on" for the system to advance to 
Zone 3, When feedback fronn slide motor 10 turns 
off, transition to Zone 4 occurs. 

The flight recorder memory maintains a record 
or history of all zones through which the mecha- 
nism has traveled. If an error zone has occurred, 
the bit pattern "000000" will be written into the 
flight recorder, and the input and output conditions 
leiading up to the error are retained for diagnostic 
purposes. This Is an important diagnostic tool. 
Upon occurrence of an error zone, any action that 
has been determined in advance can be taken. 
Several error zones can be used with different 
actions, or no action, taking place in some error 
zones. AH combinations of Input and output are 
mathematically guaranteed to be handled. Only the 
programmed zone images will be allowed to pro- 
ceed, with established minimum and maximum 
times in zone. Any other combinations of input and 
output will result in transition to an error zone that 
may or may not cause the mechanism to stop. 
Only inputs and outputs for carrying out the ma- 
chine operation need to be considered in creating 
the zone table. All other combinations are misfits 
resulting in transition to an error zone. 

As previously stated, the logic is organized into 
functional blocks or zones that are named accord- 
ing to the physical machine action taking place. 
These names are used by the diagnostic process 
to identify the action taking place in the machine 
when a fault occurs. The input and output devices 
are also given descriptive names by the program- 
mer, which facilitates the diagnostic process of 
creating meaningful messages such as "WHILE 
DRILL SLIDE ADVANCING RETURNED LIMIT 
SWITCH CAME ON UNEXPECTEDLY". 

Figure 10 is a schematic diagram which illus- 
trates this diagnostic feature of the present inven- 
tion. Station computer 40 communicates with or- 
chestrater computer 72 on loop 41 . When an error 
occurs at the station, orchestrater computer 72 
interrogates the memory of station computer 40 
and receives bit patterns indicating the error. These 
bit patterns are fed into a command interpreter 74, 
which translates the bit pattern into words and 
phrases according to a preprogrammed table 75 in 
its memory, and combines these words and 
phrases into an understandable message. The 
message is then displayed on the CRT screen of 
the terminal 76. Assume, for example, that returned 
limit switch 32 closes while the machine slide Is 
advancing - i.e. while operating in Zone 2. Since 
this is not defined as a regular condition to be 
expected in Zone 2, an error is indicated. Or- 
chestrater computer 72 interrogates station com- 
puter 40, and the latter sends a bit pattern such as 
00010100 that translates in the command Inter- 
preter Into "while" and "slide advancing" and into 



"returned limit switch turned on" and 
"unexpectedly". The message that appears on the 
terminal screen is "WHILE DRILL SLIDE ADVAN- 
CING RETURNED LIMIT SWITCH CLOSED UN- 
5 EXPECTEDLY". Thus, command interpreter 74 and 
preprogrammed tables 75 together comprise an 
error message composer which automatically asso- 
ciates predefined text with the error message re- 
ceived from the station computer. It will be noted in 
10 particular that this feature of the invention coordi- 
nates with the use of predefined zone logic as 
hereinabove described since examination of the 
zone image and unexpected event effectively de- 
fines the error message. The system thus presents 
15 the diagnosis of the problem in a standard lan- 
guage readily understood by humans. An operator 
immediately identifies the fault without further 
thought or interpretation of logic consequences of 
relay contacts. It will be appreciated that the error 
20 messages themselves are not preprogrammed, 
only individual message segments associated with 
specific conditions. Thus, the designer need not 
consider all possible combination of errors. 

An algorithm for composing an error message 
25 is shown in Figure 17. Variables are shown in 
brackets and fixed information - i.e. "WHILE" - is 
shown in blocks. Zone names are selected from 
the zone logic table. The name of the offending bit 
is taken from the I/O listings of the tables. The 
30 zone engine extracts these names by identifying 
the zone and proceeding across the I/O element 
image to locate the erroneous condition. An I/O 
table contained In the command interpreter is illus- 
trated in Figure 19. An example of an error mes- 
35 sage is shown in Figure 1 8. The I/O table shown In 
Figure 19 has a few entries for demonstration pur- 
poses. This table shows the name of the I/O de- 
vice, the station where it is located, the slot number 
in the panel where the I/O device is located, and 
40 the wire number connected to that I/O device. 
Each, of the I/O slots and wires is labeled. The 
physical arrangement of these I/O devices and 
wires is shown in co-pending patent application 
"Control Station including a conductively Isolated 
45 Depluggable Control ler"-R. T. Lovrenich. If a ma- 
chine transfers from Zone 1 to Zone 3 for example 
when it should transfer to Zone 2, it will first 
transfer to Zone 3 as instructed, but seeing the 
wrong set of input and output conditions it will exit 
60 to the error zone. In the meantime it will have 
exited Zone 1 too quickly and violated the mini- 
mum time in zone. This stops the program and 
generates a message "unexpected zone". 

Figures 11-16 of the drawings illustrate the use 
65 of a zone logic table when designing a more com- 
plex production line. The tables have been com- 
pleted to operate a system having an orchestrater 
computer, a drill station with a slide and a rotating 
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spindle, a transfer station, and a clamp station. In 
practice more work stations, such as milling ma- 
chines, gages, etc. may be involved. However, the 
demonstration is limited to one work station for 
sake of simplicity. Zones are listed by their names 5 
along the left side of the tables and I/O functions 
are listed along the top of the tables. This repre- 
sents the entire design of the system. It is done in 
plain language. A complete production line is clas- 
sified as a "machine"; a station is classified as a io 
"station"; and a mechanical device is classified as 
a "mechanism". Mechanisms are combined to 
form a station and stations are combined to form a 
machine. Use of the "standard" zone logic table 
form as shown in the drawings to design individual is 
station logic will be self-evident from FIGS. 11-16 
in view of the proceeding discussion. 

Claims 
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1. A distributed logic control system (Fig. 1) com- 
prising: 

a plurality of stations (40; Fig. 4; 6:3-5; 
14:25-32) each having means (40) for control- 
ling the operation of said station (Fig. 1 ; Fig. 4; 
6:5-12), said controlling means comprising, 

means (40, 72) for monitoring and control- 
ling the operation of said plurality of stations 
(7:2-14; 9:1-14; 12:31-13:9; 14:25-15:8), and 

communication means (Fig. 1; Fig. 30 
10,40,41,72,74; 6:25-27; 12:31-3:13) for cou- 
pling said plurality of stations to each other 
(14:25-15:8). said controlling means character- 
ized by: 

station memory (Fig. 8; 58) having a zone 35 
table (66) of zones, corresponding input/output 
images, and corresponding allowed next zones 
with at least one of said zones having a plural- 
ity of allowed next zones (e.g. Fig. 11, zone 

11). 40 

2. The distributed logic control system of claim 3, 
wherein 

said controlling means (40. 72) is further 
(comprises) characterized by: 45 

station memory means (58) for storing sta- 
tion information (64,68,70), 

means (Fig. 8,58.59,60.42.61,40; Fig. 
10,41) for coupling said station memory means 
(58) to said communication means (41,72,74). 50 
and 

means (Fig.8,54) for controlling the opera- 
tion of a mechanism of said stations, said 
mechanism control means coupling said 
mechanism (16) to said station memory means 5S 
(58). 



1 and 2 wherein 

said controlling means (40) is further 
(comprises) characterized by: 

output means (Fig. 1 . Fig. 4, Fig. 8.54) for 
providing output signals from said station 
memory means (58) to an external device (16), 

input means (Fig. 1, Fig. 3, Fig. 8, 
32,34,48; 7:2-4) for providing input signals from 
a station device (16) to said station memory 
means (40,58), and 

logic means (45,51) for controlling the op- 
eration of said station, said logic means being 
coupled to said station memory means (7:8- 
12). 



4. The distributed logic control system of claim 1 
(to 3 wherein) characterized in that: 

said communication means, mechanism 
control means, output means, input means and 
20 logic means are microprocessor units (42; 72; 

9:4; Fig. 10 ZONE ENGINE, 3:21-26), and 

said system further comprises 
memory contention means (72.74,75; 13:1- 
8) coupled between said station memory 
means and said microprocessor units for con- 
trolling access to said station memory means. 



5- The distributed logic control system of claim 1 
(to 4 wherein) characterized in that: 
said station memory (58) comprises 
a time-in-zone memory (64, Fig. 9) and a 
station journal (70). 

6. The distributed logic control system of claim 1 
characterized in that: 

the communication means is used to in- 
hibit a zone of a mechanism in one station 
based on the current zone of a mechanism in 
another station (3:32-4:4; 13:1-4. 22-26; 14:25- 
15:8). 

7. The distributed logic control system set forth in 
claims 1 to 4 and 6 further characterized by: 

means for storing the actions of a mecha- 
nism in a process record (13:1-3,20-22; 11:14- 

16), and 

means for using said stored record (11:22- 
25; 9:18-20) to inhibit at least one zone of said 
mechanism (4:13-15; 3:30-4:4; 2:24-26.30-33; 
8:19-25). 



3. The distributed logic control system of claims 
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